5th SDN Workshop ICCLab & SWITCH

Transcription

1 5th SDN Workshop ICCLab & SWITCH SDN-based SDK for DC Networks & Service Function Chaining Use Case Irena Trajkovska

2 Networking in DCs - Yet another abstraction layer?

3 Networking in DCs - actuals Reinvent networking for containers vs yet another abstraction layer to Neutron? Kuryr: Docker libnetwork support to Neutron API OVN: Augments OVS with logical switches and routers, security groups, and L2/L3/L4 ACLs, implemented on top of a tunnel-based (VXLAN, NVGRE, Geneve, STT, IPsec) overlay network Dragonflow will support use cases of nested containers inside a VM without the need to introduce another layer of overlay abstraction (also integrate with Kuryr) Dockers native networking has seen light Single SDN solution for OpenStack VMs and Docker containers? Sources: utm_campaign=osn&utm_content= &utm_medium=social&utm_source=twitter

4 Mo5va5on and Objec5ve Problem Datacenter cloud networking bases on protocols that were not ini5ally designed for it Tunneling protocols generate inherent cascading and encapsula5on especially in mul5 tenant systems Complexity leads to systems that are prone to errors, energy inefficient with increased difficulty to configure and maintain Vendor specific configura5on requirements and heterogeneous architectures Technology enablers SDN Reduce complexity by unifying and centralizing network configura5on; easier programmability of networking systems Goal: Define compe55ve use cases and sophis5cated solu5ons towards op5mized SDN design for modern cloud architectures

5 Netfloc Strategy Network functions should be pluggable and chainable Reduce the complexity and protocol overhead in cloud networks Project a global view of the network for easier analysis Increase the traffic efficiency

6 Technical Innova5on NETwork FLOws for Clouds (NeBloc): Datacenter network programming tools and libraries packed as SDK for network programmers Based on OpenDaylight controller for SDN- enabled end- to- end management of OpenFlow enabled switches Improves exis5ng networking func5ons and leverage development of novel networking applica5ons NeBloc features Rest based NeQloc applica5on as ODL module (ODL dynamically loads NeQloc applica5ons at run5me) APIs and programmable interfaces to retrieve informa5on from the OpenDaylight datastore repository and OpenStack Neutron Establishes per tenant specific network graph for end- to- end flow control between OpenStack VMs Uses conneceon based abstrac5ons as: Network Graph, Network Path, Flow PaHern,.. Completely SDN and OpenFlow based enables to create abstrac5ons of the underlying network and provide alterna5ve libraries and flow pa[erns to the encapsula5on protocols used in OpenStack environment

7 Application Driven Development Isolated network slices and connectivity services Ensure tenant segregation using novel non-gre/vxlan tunneling mechanism for optimized packet header Resilience Provide direct SDN data plain control & on-demand switch provision and configuration Service Function Chaining Traffic steering mechanism within ODL Monitoring, administration & QoS support Provide OpenFlow based datacenter monitoring and QoS network adaptation.

8 SDN Application within Netfloc Technical Architecture NeQloc applica5on

9 Example: Neutron Port Creation 9

10 Network Graph Model 10

11 Some T-Nova VNFs vtu Open-source, modular, customizable; contains encoding/decoding plug-ins Convert video streams from one video format to another Transcoding (mono-directional: video streaming; bi-directional: videoconferencing applications) vtc Traffic analysis (pps), add tagging rules (change packet ToS) Http request to apply rule IDs and ToS onto endpoint for the classifier ndpi searches within the payload of the packet to find ex. facebook content vproxy Bandwidth limitations, web caching, url filtering (parental control), system user anonymity Dashboard which can be used by a user in order to configure Squid for his LAN in a high lever way 11

12 Single host chaining 12

13 Multi VNFs chaining (packet analysis) 13

14 Multi VNFs chaining (ndpi) 14

15 Netfloc SFC API Draft CHAIN PATH A chain path is a logical subsequent connection between specific neutron ports. [ port_a, sfc_1_in, sfc_1_out, sfc_2_in, sfc_2_out, port_b ] Each of the listed items would be neutron ports. The SDK caches all the created ports so they could be referenced by their ID. CHAIN FLOW PATTERN A flow pattern for SFC chains would match on the specific structure of a chain path and can be applied onto one. Needed in scenario where the chain is determined by a classifier, which is altering the packet structure in order to tag the traffic for different chains. 15

16 Measurements I: GRE & non-gre in SDN environment Testbeds: ICCLab and Demokritos Method: (1) OpenStack GRE encapsulation & (2) Install flows on physical switch and OVSs Measurements: latency, throughput, packet loss, jitter Setup: Repeat measurements ex. 500 times for ICMP, TCP, UDP, and different MTU size Objective: (1) Compare results from the two methods (GRE & non-gre) in terms of performance achievements & (2) Compare results between two testbed setups for (1) II: Service Function Chaining using T-Nova VNFs (vtc, vproxy) Testbeds: ICCLab and Demokritos Method: (1) Install flows on physical switch and OVSs (2) Rewrite IP/mac addresses on OVSs Measurements: latency, throughput, packet loss, jitter Setup: Repeat measurements ex. 500 times for ICMP, TCP, UDP, and different MTU size Obejective: (1) Compare results in two different chaining methods: (1a) OpenFlow (1b) Mac rewriting in terms or network performance & (2) Compare results between two testbed setups for (1) 16

17 ICCLab SDN Impact and Community Projects: FIWARE - A Core Platform of the Future Internet T-NOVA - Network Functions-as-a-Service over virtualized Infrastructures SESAME - Small cells coordination for Multi-tenancy and Edge services Events: SDN biannual workshop: ICCLab and SWITCH co-organized Open Cloud Day

18 References SDN IniEaEve info: h[p://blog.zhaw.ch/icclab/category/research- approach/themes/ so^ware- defined- networking- for- clouds/ NeBloc on github: h[p://icclab.github.io/neqloc/ NeBloc architecture: h[p://neqloc.readthedocs.org/en/latest/architecture/ SDN ICCLab blog posts: h[p://blog.zhaw.ch/icclab/a- design- dra^- for- tenant- isola5on- without- tunneling- in- openstack/#more h[p://blog.zhaw.ch/icclab/provisioning- openstack- with- foreman- and- packstack/ SDN meetup / workshop: Upcoming: h[p:// Switzerland/events/ / Last: h[p://blog.zhaw.ch/icclab/4th- sdn- workshop- in- bern/

19 Demo...